ARIN's policy is to require 'assignment' via SWIP of subnets greater than
/29, unless that's change in the years?  If so, they should assign YOU as
the contact for that assignment and you should be able to control the
reverse DNS of it, as each assignment includes a nameserver for it.  Your
ISP's customers wouldn't use it, obviously since they use that ISP's dns
servers, but the rest of the world would use your assigned nameservers.
Now, technically your upstream could see this and change it since they have
overriding authority over the SWIP but unless they're out to get you, I
don't see them bothering with it.

william

-----Original Message-----
From: ISP-DNS Discussion List digest
[mailto:isp-dns@...Sent: Saturday, January 18, 2003 02:00 AM
To: isp-dns digest recipients
Subject: isp-dns digest: January 17, 2003


ISP-DNS Digest for Friday, January 17, 2003.

1. control of reverse dns
2. Re: control of reverse dns
3. Re: control of reverse dns

----------------------------------------------------------------------

Subject: control of reverse dns
From: "Brian Edwards" <bedwards@...
Date: Fri, 17 Jan 2003 12:20:47 -0600
X-Message-Number: 1

I would really like to be able to control the reverse lookups for my
addresses, but my upstream provider won't let me.  This is what I received
in response to me asking them if I could be the authoritative IN-ADDR DNS
server for the addresses they gave me.

## It is our policy [not to let customers be the authoritative IN-ADDR
## DNS server for the addresses we assign to them].  <my upstream
## provider> owns the address space and will not give someone else
## the ownership of the address space.  The reverse can be changed
## but would need to be changed by <my upstream provider>.

Is the barrier technical, administrative, or political?  The smallest
allotment of addresses that ARIN doles out is a /20.  There is
no way that I can justify needing that many addresses at this point.  ARIN's
solution according to their website is for me to get addresses from my
upstream provider.  It doesn't seem fair that I wouldn't be able to control
the reverse lookups for those addresses.  Please let me know if there is
anything I can do to make this possible.  Is my upstream provider
misbehaving or is this standard behavior?  If they are misbehaving is there
someone that I can file a complaint with (ARIN?)?

ARIN also says that I can try to get addresses from one of my provider's
providers, but my provider already told me that they won't route to any
addresses other than the one's that they assigned to me, so this doesn't
seem like a viable option.

Thanks!
Brian


----------------------------------------------------------------------

Subject: Re: control of reverse dns
From: Jeff Lasman <jblists@...>
Date: Fri, 17 Jan 2003 18:13:07 -0800
X-Message-Number: 2

Brian Edwards wrote:

> Is the barrier technical, administrative, or political?

Depending on the size of your allocation, most likely political.

> Please let me know if there is
> anything I can do to make this possible.

Change upstream providers <wry grin>.

> Is my upstream provider
> misbehaving or is this standard behavior?

It's often standard behavior.  It shouldn't be acceptable behavior.

> If they are misbehaving is there
> someone that I can file a complaint with (ARIN?)?

File a complaint with whoever orders your connectivity.  In other words,
when you can, move.

Jeff
--
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA  92517 US
Internet & Unix/Linux/Sun/Cobalt Consulting +1 909 778-9980
Our jblists address used on lists is for list email only
To contact us offlist: "http://www.nobaloney.net/contactus.html";

----------------------------------------------------------------------

Subject: Re: control of reverse dns
From: "R. Scott Perry" <horizons@...>
Date: Fri, 17 Jan 2003 21:18:31 -0500
X-Message-Number: 3


>I would really like to be able to control the reverse lookups for my
>addresses, but my upstream provider won't let me.  This is what I received
>in response to me asking them if I could be the authoritative IN-ADDR DNS
>server for the addresses they gave me.

Then that is what you are stuck with, unfortunately.

>## It is our policy [not to let customers be the authoritative IN-ADDR
>## DNS server for the addresses we assign to them].  <my upstream
>## provider> owns the address space and will not give someone else
>## the ownership of the address space.  The reverse can be changed
>## but would need to be changed by <my upstream provider>.
>
>Is the barrier technical, administrative, or political?

It is administrative/political.  They have the ability to delegate
authority to you, but choose not to.

>The smallest allotment of addresses that ARIN doles out is a /20.  There is
>no way that I can justify needing that many addresses at this point.

Even if you get IP addresses directly from have ARIN, you need some way for
those IPs to be routed to you -- so you'll need to switch Internet
providers anyways (if your current provider won't let you be authoritative
for your reverse DNS, it is unlikely that they will allow you to route your
own IPs through them.

>ARIN's solution according to their website is for me to get addresses from
my
>upstream provider.  It doesn't seem fair that I wouldn't be able to control
>the reverse lookups for those addresses.  Please let me know if there is
>anything I can do to make this possible.  Is my upstream provider
>misbehaving or is this standard behavior?  If they are misbehaving is there
>someone that I can file a complaint with (ARIN?)?

Those IPs "belong" to your Internet provider.  They can choose what to do
with them.  In this case, they are not allowing their customers to have
control over the reverse DNS (for example, many dialup and home DSL/cable
ISPs do not allow their customers to control the reverse DNS).

In this case, your options appear to be:

[1] Let your ISP handle the reverse DNS.  Reverse DNS entries rarely need
to be changed, so for most people, this would be satisfactory.
[2] Switch ISPs

                                                    -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no
annual licensing fees.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]




---

END OF DIGEST

---
You are currently subscribed to isp-dns as: william@...
To unsubscribe send a blank email to
%%email.unsub%%

Replies

[isp-dns] RE: isp-dns digest: January 17, 2003, Alex Kamantauskas